search

Kunzisoft / KeePassDX

Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
https://www.keepassdx.com/
GNU General Public License v3.0
4.29k stars 260 forks source link

Biometric with CalyxOS #1380

Open darkvadd7 opened 1 year ago

darkvadd7 commented 1 year ago

Hello, I'm on CalyxOS 3.7.0 on a Pixel 3 XL. When I'm trying to unlock with fingerprints, the popup doesn't show, and while I'm typing my password, I have a message: "Invalid argument". Thanks for your help!

J-Jamet commented 1 year ago

The Keystore may not initialize properly. You have to check that the problem does not come from the OS, because I can't reproduce the bug with my devices.

darkvadd7 commented 1 year ago

Thanks, how can I check this? And for information, fingerprints are working with other apps such as banking apps and AuthPass.

Edit: I can do logs if you need to.

J-Jamet commented 1 year ago

Thanks, how can I check this?

By looking at the source code or checking if it works with the base OS.

And for information, fingerprints are working with other apps such as banking apps and AuthPass.

Most other applications use fingerprinting with server authentication (so without KeyStore) or not with the same key storage methods in the KeyStore. I have done many tests on the subject, and even Samsung has introduced bugs on some of these devices concerning the symmetrical key storage in the secure encrypted storage key of the phone which does not allow to use the fingerprint. https://github.com/Kunzisoft/KeePassDX/issues/1269

Here you should check that CalyxOS has implemented the storage and reading of symmetric keys in the secure KeyStore of the device. Otherwise you can try the unlocking by device credential, I noticed that some custom OS work with this mode but not with the fingerprint, it depends on the implementation.

darkvadd7 commented 1 year ago

I just tried with device credential, and I have the same issue: the popup doesn't show when clicking on the lightning icon, and "Invalid argument" is displayed (can't take a screenshot to show).

J-Jamet commented 1 year ago

OK, I think there is simply a type of key storage that is not recognized by CalyxOS. If you can provide logs, we might know more.

https://developer.android.com/studio/debug/am-logcat or log app : https://github.com/tananaev/rootless-logcat (many other from stores)

darkvadd7 commented 1 year ago

Here is a screenshot of the log. Tell me if you want more. Screenshot_20220818-124340 Edit: I have the txt file if you want.

J-Jamet commented 1 year ago

My guess is good, it seems your system can't register a new key. I think there is a certificate problem on your system that limits the creation and storage of new entries in the KeyStore.

strider72 commented 1 year ago

FYI I use CalyxOS, and have successfully used fingerprint just fine. I only started using fingerprint fairly recently (a few weeks ago)